Skip to main content

kubernetes-patterns

Pods, deployments, services, ingress, RBAC, autoscaling, and production cluster best practices

Quellinformationen

Repository
cosmicstack-labs/mercury-agent-skills
Letzte Quellaktivität
10. Mai 2026 um 06:29
Erkannte Sprache von SKILL.md
Englisch
Sterne
476
Forks
63

Installationsoptionen

Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.

Quelldateien prüfen

Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.

SKILL.md wird angezeigt

SKILL.md
Quellanweisungen · Schreibgeschützte Vorschau
name
kubernetes-patterns
description
Pods, deployments, services, ingress, RBAC, autoscaling, and production cluster best practices
metadata
{"author":"cosmicstack-labs","version":"1.0.0","category":"devops","tags":["kubernetes","k8s","devops","containers","orchestration"]}
# Kubernetes Patterns Deploy and manage production Kubernetes clusters. ## Core Objects ### Workloads | Object | Use Case | Scaling | |--------|----------|---------| | Deployment | Stateless apps | Replicas, HPA | | StatefulSet | Stateful apps (DBs) | Stable network IDs | | DaemonSet | Per-node agents (logging, monitoring) | Node count | | Job/CronJob | Batch tasks, scheduled jobs | Completion | ### Networking - **Service**: Stable endpoint for pods (ClusterIP, NodePort, LoadBalancer) - **Ingress**: HTTP routing, TLS termination, path-based routing - **Network Policies**: Pod-level firewall rules ## Production Best Practices ### Resource Management ```yaml resources: requests: cpu: 100m memory: 128Mi limits: cpu: 500m memory: 256Mi ``` - Always set requests AND limits - Use LimitRange for namespace defaults - Use ResourceQuota for namespace caps ### Pod Anti-Affinity Spread pods across nodes for HA. ### Readiness & Liveness Probes - Readiness: traffic starts flowing - Liveness: pod gets restarted - Startup: for slow-starting containers ## RBAC - Least-privilege service accounts per app - Namespace-scoped roles (not cluster-wide) - Regularly audit permissions - Use groups, not individual users ## Autoscaling - HPA: scale by CPU/memory or custom metrics - VPA: adjust resource requests automatically - Cluster Autoscaler: add/remove nodes - KEDA: event-driven scaling (SQS queue depth, etc.)
Auf GitHub ansehen